Legal

Privacy Policy

Last updated: September 8, 2026

Overview

DriveDirect is a desktop application that allows users to browse files and folders in their own Google Drive and download selected content directly to their computer without ZIP bundling.

This Privacy Policy explains how DriveDirect accesses, uses, protects, stores, retains, and deletes information associated with the use of DriveDirect and Google Drive.

Google Account Access

DriveDirect uses Google OAuth to allow users to connect their own Google Account to the application.

DriveDirect requests the following Google Drive permission:

https://www.googleapis.com/auth/drive.readonly

This permission provides read-only access to files and folders in the user's Google Drive.

DriveDirect uses this access only to provide the functionality requested by the user, including:

  • Listing Google Drive folders and files.
  • Reading file and folder metadata required to display Google Drive content inside DriveDirect.
  • Browsing folders selected by the user.
  • Downloading files selected by the user.
  • Exporting supported Google Workspace files into standard local file formats when requested by the user.

DriveDirect does not use this permission to modify, delete, rename, move, or upload files to the user's Google Drive.

Google User Data We Access

When a user connects Google Drive, DriveDirect may access Google Drive information necessary to operate the application, including:

  • File and folder names.
  • File and folder identifiers.
  • File types and MIME types.
  • File sizes and other metadata required for download.
  • Folder hierarchy and contents.
  • File contents when the user requests a download or export.

DriveDirect only accesses Google Drive data required to provide the application's file browsing and downloading functionality.

How Google User Data Is Used

Google user data is used solely to provide and improve the DriveDirect functionality requested by the user.

DriveDirect does not use Google user data for:

  • Advertising or targeted advertising.
  • Personalized advertising.
  • Selling user information.
  • Data brokerage or information resale.
  • Determining creditworthiness.
  • Training generalized artificial intelligence or machine learning models.

File Handling

When a user selects a Google Drive file or folder for download, DriveDirect transfers the requested content to the local folder or external storage location selected by the user.

DriveDirect does not operate a cloud storage service for copies of the user's Google Drive files and does not intentionally retain downloaded Google Drive file contents on DriveDirect servers.

Data Protection and Security

DriveDirect uses reasonable technical and organizational security measures designed to protect sensitive user information against unauthorized access, disclosure, alteration, or misuse.

Communications with Google APIs and DriveDirect online services are transmitted using encrypted HTTPS connections.

Google OAuth credentials and authorization information that need to persist on the user's computer may be stored locally using secure operating-system storage mechanisms where available.

For example, DriveDirect uses operating-system secure storage to protect locally stored application credentials and licensing data where supported by the operating system.

DriveDirect does not intentionally expose Google OAuth access tokens, Google Drive file contents, or other sensitive Google user data to unauthorized third parties.

Data Sharing and Disclosure

DriveDirect does not sell Google user data.

Google Drive file contents are not shared with third parties for advertising, marketing, data resale, credit decisions, or unrelated purposes.

DriveDirect may use service providers that are necessary to operate the product and business infrastructure, including:

  • Google for OAuth authentication and Google Drive API access.
  • Paddle for checkout, payment processing, billing, taxes, and subscription management.
  • Cloudflare for website and backend infrastructure.
  • Resend for transactional emails such as license delivery and purchase-related communications.

These providers process information only as needed to provide their respective services and are subject to their own privacy and security policies.

Data Retention

DriveDirect does not retain copies of Google Drive file contents on its servers after a user downloads them.

Google Drive metadata used for browsing and downloading is processed only as required to provide the application's functionality and is not intentionally retained as a permanent DriveDirect cloud copy of the user's Google Drive.

Google OAuth authorization information may remain stored locally on the user's computer so that the user can remain signed in to Google Drive between application sessions.

Account, licensing, billing, transaction, activation, and security records may be retained for as long as necessary to provide the subscription service, prevent fraud, comply with legal obligations, maintain accounting records, resolve disputes, and protect the security of DriveDirect.

Data Deletion and Revoking Google Access

Users may disconnect their Google Account from DriveDirect using the Disconnect from Google option available in the application.

Users may also revoke DriveDirect's access directly through their Google Account security and third-party access settings.

After Google authorization is revoked, DriveDirect can no longer access the user's Google Drive through that authorization unless the user grants access again.

Locally stored DriveDirect authorization information may also be removed by disconnecting the Google Account from the application or by removing/resetting the application's locally stored data.

Users may request deletion of personal information maintained by DriveDirect by contacting:

support@drivedirect.app

Upon a valid deletion request, personal data under DriveDirect's control will be deleted or anonymized unless retention is required or permitted for legal, billing, accounting, fraud prevention, dispute resolution, or security purposes.

Payment and Subscription Information

Checkout, payment processing, billing, taxes, and subscription management are provided by Paddle.

DriveDirect does not directly collect or store complete payment card details.

DriveDirect may receive information associated with a completed purchase, such as customer email address, subscription identifier, transaction identifier, subscription plan, subscription status, and billing-related status information.

Licensing Information

DriveDirect uses a licensing system to enforce the number of computers permitted by the purchased license.

Licensing information may include:

  • License key.
  • Subscription status.
  • A generated device identifier.
  • Device name.
  • Activation date.
  • Last validation or activity timestamp.

Transactional Email

DriveDirect may use Resend to send transactional emails including license delivery, purchase confirmations, and important service-related communications.

The email address associated with a purchase may therefore be processed for these purposes.

Google API Services User Data Policy

DriveDirect's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Changes to This Privacy Policy

DriveDirect may update this Privacy Policy when functionality, security practices, legal requirements, or third-party integrations change.

The most recent version will be published on the DriveDirect website with an updated revision date.

Contact

For privacy questions, Google user data requests, or deletion requests, contact:

support@drivedirect.app